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Abstract —We propose orthogonal frequency division multi¬ 
plexing (OFDM), as a spectrally efficient multiplexing technique, 
for quantum key distribution (QKD) at the core of trusted- 
node quantum networks. Two main schemes are proposed and 
analyzed in detail, considering system imperfections, specifically, 
time misalignment issues. It turns out that while multiple 
service providers can share the network infrastructure using the 
proposed multiplexing techniques, no gain in the total secret 
key generation rate is obtained if one uses conventional passive 
all-optical OFDM decoders. To achieve a linear increase in the 
key rate with the number of channels, an alternative active 
setup for OFDM decoding is proposed, which employs an optical 
switch in addition to conventional passive circuits. We show 
that by using our proposed decoder the bandwidth utilization is 
considerably improved as compared to conventional wavelength 
division multiplexing techniques. 

Index Terms —Quantum key distribution, orthogonal frequency 
division multiplexing, quantum networks 

I. Introduction 

Q UANTUM communications has entered a new phase 
in its development targeting new markets and aiming 
at widespread use and adoption in different scenarios. With 
the successful demonstration of SECOQC 111 and Tokyo 0 
quantum key distribution (QKD) networks, we are now at a 
stage to develop many-user quantum networks 0-0. The 
reach of conventional QKD links is, nevertheless, limited as 
they rely on low-power signals, e.g., single photons Q. The 
initial solution perceived for the first generation of quantum 
networks relies on a trusted set of nodes, in a mesh topology, 
at the core network. Such nodes enable secure key exchange 
between any two remote users via a cascade of key exchanges 
between neighboring nodes along the path that connects the 
two users. In order to support many users at the access 
nodes, it is necessary to proportionally generate longer secret 
keys between the internal core nodes of the network. The 
analogy in classical telecommunications is the ratio between 
the end-user data rates and the high traffic of data at the 
backbone of the network. One simple idea to achieve higher 
key rates is to use multiplexing techniques to generate keys in 
parallel. In this paper, we employ one of the most advanced 
classical multiplexing techniques to come up with orthogonal 
frequency division multiplexed QKD (OFDM-QKD) schemes. 
We look at existing all-optical orthogonal frequency division 
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Fig. 1: Trusted-node architecture for emerging quantum networks. The end 
users may be connected to the core network via passive optical networks. In 
order to generate a secret key between two end users, one must first generate 
a key between any two neighboring nodes along their connecting path. The 
key generated between the end user and its corresponding central office can 
then be encrypted and securely relayed node by node until it reaches the other 
party. Note that the internal links (thicker lines) must carry a higher traffic. 


multiplexing (OFDM) techniques 0-ED and partly modify 
their setups in order to obtain spectrally efficient high-rate 
OFDM-QKD schemes. 

QKD enables secure key exchange without relying on 
computational complexity. This is in contrast with existing 
techniques for key exchange, e.g., the RSA protocol Ifl4ll . 
whose security is at risk with the advancement of technology 
|fl5| . In that sense, QKD provides a future-proof method of 
secure communications. The first proposed QKD protocol 
by Bennett and Brassard in 1984 (BB84) Q relied on the 
polarization encoding of single photons. Since then new pro¬ 
tocols and encoding schemes have emerged and QKD has seen 
field demonstrations along with conventional telecom channels 
0 , m-m. Recent demonstrations cover distances over 
250 km lfl9ll and with nearly 50 users. The next step for QKD 
development will focus on extending the reach of the system 
and the number of users QKD networks can support. 

Quantum networks are facing several challenges before their 
full implementation. One key requirement is their integra¬ 
tion with existing and future classical optical communication 
networks 0 , |f20| . This implies the need for new quantum 
friendly standards for optical networks. That will include 
devising proper mechanisms by which weak quantum signals 
can be separated from classical channels fl8l . 12 1 II . Multiple- 
access techniques are also needed to enable interference-free 
access to different quantum users 0 , (22). Eventually, QKD 
systems must improve their performance in terms of rate- 
versus-distance behavior and cost. 

One feasible approach to long-distance QKD is based on 
trusted-node quantum networks. With current technology, we 
are able to generate secret keys at a rate on the order of Mb/s 
at 50 km of distance lfT8l . By cascading several of such links, 
as shown in Fig. Q] and trusting all intermediate nodes, one, 
in principle, can exchange secret keys at any distance by first 
generating secret keys between neighboring nodes and then 
relaying the initial key, in an encrypted way, to the other party. 
The main requirement for this approach is to trust all nodes 
in between the two end users. While this assumption may 
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be acceptable for the first generation of quantum networks, it 
can be removed in future generations by relying on quantum 
repeater setups at the core network ||23| . 

In trusted-node networks, the internal nodes in the core 
network are expected to have a high traffic of key exchange 
as they are providing service to a large number of end users. 
It is important then to generate a large number of secret key 
bits per allocated wavelength to each quantum channel over 
these core links. One possible approach is to use non-binary 
signalings to send more key bits per transmitted quantum state 
l24l . In addition to this, we should think how most efficiently 
we can use the available bandwidth per allocated wavelength, 
especially with reference to QKD systems that rely on dense 
wavelength division multiplexing (DWDM) techniques II. 
Our proposed solution here relies on one of the most spectrally 
efficient methods in classical communications, i.e., OFDM. 
OFDM relies on the full orthogonality of its subcarriers to 
multiplex multiple channels. This full orthogonality is essential 
in QKD applications 0, El, in order to minimize the 
interference from other classical and quantum users. In our 
case, each subcarrier represents a QKD channel between two 
core nodes. The total key generation rate between these two 
nodes is then expected to increase linearly with the number of 
subcarriers. Moreover, OFDM is compatible with non-binary 
signaling techniques, and that would enable us to take the 
maximum benefit from the available bandwidth. Finally, by 
using a multiplexing technique, multiple service providers can 
use the capacity of the core network without trusting each 
other. Note that the OFDM-QKD can be modified to be used as 
a multiple-access technique in multi-user QKD setups. In this 
paper, we focus on the multiplexing aspect with the objective 
of increasing the rate at the core of QKD networks. 

Being an optical system, QKD can be merged best with 
OFDM if all-optical OFDM encoders and decoders are used. 
Here, we consider two possible implementations for the all- 
optical OFDM transmitter. In the first approach, the OFDM 
subcarriers are generated directly by a bank of frequency offset 
locked laser sources or an optical comb generator m-m. 
After encoding the subcarriers, an optical coupler combines 
them to generate the OFDM signal. The second approach 
uses the optical inverse discrete Fourier transform (OIDFT) 
circuit to generate the OFDM signal lITOl — IT3l . Short pulses 
are fed into the OIDFT circuit following the QKD encoding 
stage. Both these approaches rely on real-time optical discrete 
Fourier transform (ODFT) at their receivers. Conventional 
passive implementations of ODFT turn out to be too lossy 
to be useful for our main objective of increasing the rate. In 
our work, we show how the ODFT circuit can be modified to 
be effective for QKD applications. 

Different QKD protocols can be used in our proposed 
OFDM-QKD setups. Here, we focus on the decoy-state variant 
of the BB84 protocol l26l . The decoy-state technique allows 
us to use weak laser pulses, rather than ideal single-photon 
sources as originally proposed in 0, and that would simplify 
the encoding equipment of QKD. In order to obtain immunity 
against the photon-number splitting attacks, in the decoy- 
state protocol, for every transmitted QKD pulse, the sender 
has to randomly choose its intensity from a set of available 


intensities, where one of which corresponds to the main signal, 
and the rest to decoy states. In practice, it is often sufficient 
to use only two decoy states ED, although, in this paper, 
for analytical convenience, we assume infinitely many decoy 
states are used. Our proposed setups are compatible with other 
QKD protocols, such as continuous-variable or distributed- 
phase QKD protocols ll28l . The detailed analysis of the latter 
systems is, however, beyond the scope of this paper. 

Both optical OFDM and QKD are advanced technologies. It 
is interesting to see how drawbacks in one system would trans¬ 
late into the other. While some of the drawbacks with OFDM 
may directly affect our OFDM-QKD system, there are certain 
issues that are less of a problem in a QKD setup. For instance, 
one known OFDM problem in the classical domain is its high 
peak-to-average power ratio, which makes it susceptible to 
distortions due to nonlinearity effects 123, GDI- Fortunately, 
for QKD applications, nonlinearity is not necessarily a major 
issue because the QKD transmitted signals are low power. 
Nevertheless, the common OFDM-related imperfections such 
as time misalignment GD-GD, phase noise introduced by 
the lasers ED, OH, G3, and frequency offsets between the 
transmitter and the receiver carriers (in the case of applying 
a local oscillator at the receiver) O0l . Il34l can potentially 
influence the orthogonality between subchannels, and subse¬ 
quently affect the performance of OFDM-QKD systems. In 
this paper, we specifically consider the degrading effects due 
to time misalignmnet, which is the major source of error in 
the most promising setup we propose here. 

Finally, it is interesting to note that, while one of the 
key advantages of OFDM in the microwave domain is its 
reliance on digital signal processing, OFDM-QKD setups 
may less benefit from this feature. At the receiver side, any 
measurement on the OFDM signal before the QKD decoders 
could alter the transmitted states and result in errors. That is 
why it is important to have a fully optical setup for OFDM 
decoders. At the transmitter side, an optical OFDM setup 
would, in principle, allow multiple users to encode their key 
bits without trusting each other. This cannot necessarily be 
achieved if we first generate the OFDM signal electronically 
and then convert it to an optical signal. That said, there will 
be much room for improvement in future work, while, in this 
work, we assess the possibility of OFDM-QKD systems. 

The rest of the paper is organized as follows. In the next 
section, we propose two OFDM-QKD schemes and describe 
their principles of operation. In Sec. Ill, the proposed OFDM- 
QKD schemes are analyzed from a quantum mechanical 
perspective. The analysis of secret key generation rate is 
presented in Sec. IV, in which we particularly focus on time 
misalignment issues within the OFDM system. We propose 
an optimal gating solution to maximize the key rate. Some 
numerical results are then presented in Sec. V. We conclude 
the paper in Sec. VI. 

II. System Description 

In this section, we describe QKD over all-optical OFDM 
links. Figure [2] shows the overall system structure. The QKD 
encoders generate the quantum signals, in the form of pulses. 
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Fig. 2: QKD over an OFDM link. The QKD encoded optical pulses are mul¬ 
tiplexed by an all-optical OFDM encoder. At the receiver, the corresponding 
OFDM decoder followed by QKD decoders are used to generate secret keys. 


that carry the information about the encoded key bits in each 
subchannel. The resulting optical pulses are fed simultaneously 
into the OFDM encoder to be multiplexed. At the receiver, the 
OFDM decoder followed by essential QKD decoding modules 
can be used to complete the QKD protocol. The key part in the 
OFDM decoder is an ODFT circuit, which effectively separates 
the subchannels. 

In this paper, we assume that the QKD encoders perform 
phase encoding using decoy-state techniques |26l . Based on 
the phase-encoded BB84 protocol, Alice chooses her phase 
value (f>A from one of the bases {0,7r} or {n/2,3n/2}. The two 
phase values in each basis correspond to bits 0 and 1. As 
shown in Fig. [3] an optical pulse sent by Alice passes through 
a Mach-Zehnder interferometer (MZI). The output is two non¬ 
overlapping successive pulses, denoted by r and s, of duration 
T with a relative phase corresponding to the chosen basis and 
the transmitted key bit. The QKD decoding includes Bob’s 
selection of his measurement basis by choosing the phase ipa e 
{0, 7t/ 2) randomly in one arm of his MZI and the detection of 
the output signal. In the following, we describe two OFDM- 
QKD setups based on the proposed schemes for all-optical 
OFDM. 

A. Scheme I 

Figure Q] depicts the OFDM-QKD system that relies on 
directly generated subcarriers. At the transmitter, a bank of 
frequency offset locked laser diodes generate the input optical 
pulses to N QKD encoders. These pulses are individually 
phase randomized, as required by the decoy-state protocol 
ll36l . and then go through a bank of encoders as in Fig. [3] 
Because the information is encoded in the phase difference, 
these overall random phases do not change the encoded bits. 
The same holds for the possible phase noise of the lasers 
so long as their phase is constant during the transmission of 
each bit. In our forthcoming analysis, we account for possible 
relative phase distortions between r and ,v pulses in Fig. [3] 
The outputs of the QKD encoders are then combined to form 
the OFDM signal. If we trust all the elements in the Alice 
box of Fig. [4] we can adjust the transmitted power such that 





Fig. 3: Phase encoded QKD. Alice encodes her key bits by choosing a phase 
value (f>A € {0, 7t/ 2, 7r, 37 t/ 2}. Each optical pulse passes through the MZI and 
produces two output pulses with the relative phase <pA- On the Bob’s side, a 
similar MZI is used to recombine r and s modes, followed by photodetection. 
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Fig. 4: OFDM-QKD using directly generated subcarriers. The optical pulses, 
generated by N frequency offset-locked laser diodes, are fed into the QKD 
encoders. At the receiver, an ODFT circuit is required to separate the 
subcarriers. 
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Fig. 5: (a) The passive ODFT circuit for N = 4. The circuit consists of 
three MZIs with corresponding delays and phase shifts, (b) Shifted replicas 
of the input OFDM signal for N = 4. The shift values for N = 4 are 
{0, r/4,772,3774}. The time slot, in which all these copies overlap, is 
extracted by the time gating operation. 


it is at the output of the combiner that each subchannel has 
the right intensity for its corresponding pulse. This will allow 
us to neglect the losses in the encoder box, as we assume 
in this paper. At the receiver, ODFT is used to demultiplex 
the subcarriers. To comply with the OFDM orthogonality 
condition, in Scheme I, the pulse width is T — 1/A/, where 
A/ is the frequency separation of the subcarriers. 

To illustrate the principles of this scheme, consider the clas¬ 
sical case, where the OFDM signal is generated by combining 
classical subchannels as follows: 

N -1 

x(t) = ^ a k e jUk ', 0 < t < T, (1) 

k =o 

where a k is the complex amplitude of the k' h subchannel with 
frequency u) k - coq + 2nkAf for a nominal channel frequency 
wo- The ODFT circuit, at the decoder, will then separate 
different subcarriers and generate the following output signals: 

At-1 

yjt) — — x(t — uT c )e j2nnm,N , m = 0, 1, (2) 

N n =0 

where T c = T/N. With the assumption of T - 1/A/, we can 
conclude from (|7]i and (0 that 

yjf) = 2 a*^(i 2 (3) 

k=0 n=0 

The term in the brackets is nonzero only if k — m, which leads 
to the m ,h subcarrier extraction. 

Different methods can be used to realize the OFDM de¬ 
coding, as required by ([2}, in the optical domain. In Scheme 
I, we assume that the ODFT is implemented by a passive 
structure consisted of N - 1 MZIs (SJ. Figure 0 a) shows an 
ODFT circuit for N = 4. This structure imitates the efficient 
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Fig. 6: OFDM-QKD using OIDFT circuit. A train of short pulses generated 
by an MLL is split into N paths. The OFDM symbol is generated by 
multiplexing the output pulses of the QKD encoders by the OIDFT circuit. 
The OFDM symbol consists of a series of pulses, each a superposition of 
pulses from different inputs. At the receiver, an ODFT circuit demultiplexes 
the subcarriers. 


method of realizing DFT, known as fast Fourier transform 
(FFT), by means of delays, couplers, and phase shifters. Each 
output port of the ODFT circuit is a weighted sum of shifted 
replicas of the input as required by (0). It will then provide 
us with a real-time DFT operation once all shifted replicas of 
the input overlap, as shown in Fig. 0b). That would require 
a time gating operation 0, 0, which can be implemented 
by electro-absorption modulators (EAM), or simply by time¬ 
gating the single-photon detectors used in the QKD decoders. 
Time misalignment can then be a major source of error in 
such a scheme. The quantum operation of the ODFT circuit 
is discussed in more detail in Sec. m 

B. Scheme II 

Figure [6] shows an alternative setup for the OFDM-QKD 
system. Here, the output of a pulsed laser source, e.g., a 
mode-locked laser (MFF), is split into several paths by an 
optical splitter. The pulses should be short enough to cover the 
spectrum of all the subcarriers in the OFDM symbol. Here, we 
assume that the pulse width is slightly lower than T c . Similar 
to Scheme I, each short pulse, after splitting, is fed into QKD 
encoders to produce successive pulses r and s. Each of these 
pulses will then go through an OIDFT circuit generating N 
short pulses within an OFDM symbol duration T. The delay 
in the MZI of Fig. [3] is assumed to be greater than T. 

The required OIDFT can be implemented by a structure 
similar to the ODFT. For instance, the circuit in Fig. 0 a), for 
the special case of N = 4, can be employed for OIDFT as 
well. In the case of OIDFT, the input pulses (denoted by y 
components) enter from the right hand side of Fig. [5ja) and 
the output will be the signal labeled by x(t). Assuming that the 
y pulses are synchronous, in each OFDM symbol, the output 
signal x consists of four pulses apart by multiples of T c within 
a T-long frame. Each of the latter pulses are a combination 
of all input pulses, as shown in Fig. [6] 

More generally, in the classical case, the generated OFDM 
amplitude at any carrier frequency co is given by 

JV—1 N -1 

X{t) = Akp(t ~ lT c)e j2nkllN , (4) 

k=0 1=0 

where p(t) represents the shape of the initial laser pulse and 
Ah is the complex amplitude of the k ,h subchannel. Note that 
in Fig. [6] subchannels are separated spatially at the input to 


OIDFT. At the receiver, the ODFT operation in (0) shifts each 
of the pulses within an OFDM symbol and combines them 
together to generate 

y,n(t) = JH 2 2 Z Akp(t ~ {n + I)T c )e j2n{kl+nmPN , (5) 

” n =0 k=0 1=0 


for m e {0,1, 1). In a real-time implementation, only at 

n + l = N — 1, all relevant input pulses are added together at 
which y m (t) reduces to 


N -1 


k=0 


N -1 


zM = 2 ^ P (t -(N- 1)r c )^-w"(l 2 


J2nn(m-k)/N 


)■ 


n =0 


( 6 ) 

Here again, the term in the brackets is zero for k 4- m, which 
implies that, up to a known overall phase factor, the original 
information in A m can be recovered at the /nth output port of 
the ODFT circuit of Fig. [6] 

For the receiver of Scheme II, we have two options. We 
can either use the passive OFDM decoder used in Scheme I, 
or, alternatively, the active structure shown in Fig. 0 a). The 
main advantage of the latter is to remove the inherent loss in 
the passive OFDM decoder. To better explain the loss effect 
in the passive decoder, consider a sequence of N pulses at the 
input x(t) of Fig. 0 a), and let us look at the output signals. 
In this case, each input pulse has four paths to take, with 
different delays and phase shifts, to reach to the output ports 
of Fig. 0 a). In other words, for each input pulse, there will be 
four output pulses at each of the decoder’s four output ports; 
see Fig. 0b). Only one out of these four output pulses has 
the right amount of delay and phase shift to be used for our 
ODFT operation, and that is why time gating is required. The 
inevitable drawback of this approach is that the other three 
pulses, and the power therein, will remain unused and that 
will contribute to a maximum total efficiency of 1/A for a 
passive decoder as in Fig. 0 a). To overcome this drawback, 
our proposed OFDM decoder in Fig. 0 a) employs an optical 
switch along with proper delays, instead of a passive circuit, to 
perform the serial to parallel conversion. As shown in Fig. 0c), 
this way there will be no extra pulses to be discarded, and 
the ODFT process can be implemented by a passive N-by-N 
circuit, of a star topology but with phase shifters along each 
internal path, with no fundamental overall loss 0, 63. 

The above feature of the active decoder in Fig. 0a) makes 
it a better choice for high-rate QKD links, as we will see 
in the following sections. The passive decoder schemes can 
still be used for the sake of sharing the channel resources 
between multiple service providers. They do not, however, 
offer any total-rate advantage as compared to a single-carrier 
system. Note that the OFDM decoder of Fig. 0a) is mostly 
compatible with Scheme II, due to its discrete nature, as 
compared to Scheme I. Nevertheless, one should take note of 
possible challenges of using the active decoder with Scheme 
II. While, by using a common pulsed source. Scheme II is 
more immune to phase noise or frequency offset problems, 
time misalignment is still a key concern. That is why, in the 
following sections, we study the impact of such timing errors 
in our OFDM-QKD setups. Secondly, while the active decoder 
removes the loss associated with time gating, its optical switch 
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Fig. 7: (a) Proposed active ODFT circuit. By employing an optical switch 
instead of a power splitter, the loss of time gating is eliminated, (b) Passive 
approach to serial-to-parallel conversion for ,V = 4. Some pulses are generated 
and then discarded during the time gating process, (c) Active approach to 
serial-to-parallel conversion for N = 4 followed by the FFT circuit (§]. 


will introduce some additional insertion loss. The latter, within 
our practical regime of interest, is shown to be less than 2 dB 
for ultrafast optical switches and will be accounted for in 
our numerical analysis (38). Optical switches may also have 
nonzero extinction ratios, because of which some power leaks 
to other undesired output ports. This is a minor problem for 
the decoder of Fig. 0 a), because the input pulses to the switch 
are non-overlapping in time. By using time gating and proper 
delay lines, the leaked power to other ports should not appear 
in the same time slot that time gating is taking place, hence 
has negligible effect on system performance. 

III. Quantum Analysis 

In this section, we analyze the OFDM-QKD systems pro¬ 
posed in Sec. [IT] from a quantum mechanical perspective. 
We choose the Heisenberg picture for our analysis. In two 
steps, we first concentrate on the operation of the system 
corresponding to each of the two pulses r and s in Fig. 0 
and then we combine the results to find the output operators 
in QKD decoding modules. 

A. Scheme I 

In the Heisenberg picture, the output operator of the Alice 
box in Fig. [4] can be expressed as 

N-\ 

x(t) = ^ a k e jaJkt , 0 < t < T, (7) 

k=0 

where ak is the annihilation operator corresponding to the 
mode representing the k' h subcarrier. For the rest of this sec¬ 
tion, we neglect the path loss effect, which will be considered 
when we calculate the secret key generation rate. We then 
focus on the receiver setup assuming that at its input the signal 
x(t) is received. 

For simplicity, let us first consider the special case of N - 4. 
As shown in Fig. [5] the ODFT circuit, in this case, is imple¬ 
mented by three MZIs. The operators i>o(t) = ZkJo boke ja>k ‘, 


bi(t ) = ZkJo bue jWkl and b 2 (t) = XfrJ b 2k e JbJtt represent the 
vacuum fluctuations of the unused ports of the MZIs’ beam 
splitters corresponding to all existing frequency modes of the 
system. For a center frequency, u>, the transformation matrices 
of the three MZIs in Fig. 0 are given by 


B,,,a - — 


1 J 

j 1 


1 


for the MZI on the left, 


1 

= - 


1 j 
j 1 


for the one on top right, and 


1 

B cv,3 = T 


1 j 
j 1 


0 


0 


0 

£-/'(" 7) 


1 

0 je 


0 

-/W7) 


1 j 
j 1 


( 8 ) 

(9) 

( 10 ) 


for the one on bottom right of Fig. [3 a). Applying the above 
transformations to mode k, we obtain 


m J 

- B IIJt _ 1 1 

a k (f) \ 
bokit ) /' 

yo,M ^ 
y\, k it ) j 

| = B oj t a 

l Kit) \ 
l bi k it) ) 

h,kif) ' 
h,kit ) , 

| = B at k ,3 

1 m \ 

l bikit) ) 


( 11 ) 

( 12 ) 

(13) 


The output operator for output port m in Fig. [3 is then given 
by 

3 

y m (t) = y] y m ,k(t ). m = 0,1,2,3. (14) 

k =0 


Note that the above operations are all linear. Based on the 
superposition principle, we can split each output y m (t) to two 
parts. The first part is the output obtained by neglecting the 
vaccum operators, and the other part is a linear combination 
of all vacuum operators. More generally, it can be concluded 
that the output of such an ODFT circuit, neglecting the vacuum 
operators, can be expressed as a function of x(t), as follows: 

1 N-l 

XJt) = — x(t — nT c )e j2m,m/N , m = 0 -,1V - 1, (15) 

N n =0 

which is similar in form to ([3 for the classical case. Substi¬ 
tuting 0 into ( 1 1 51 ) and applying the orthogonality condition, 
A/ = we obtain 


X m it) = Y j a k e^ +kAB, i^Y j e 

k =0 V n=0 


j2nn(m—k)/N 


)■ (16) 


Note that the term in the brackets is nonzero only if k = m. 
We then obtain 

N-2N-1 

y m (t) = Aa m (t) + ^ ^ Pikbikif ), m = (17) 

1=0 k= 0 


where A is either 1 or j and /},*’s are constant coefficients. 
The operator a m (t) is the evolved version of ci m and is given 
by a m (t) — a m e-’ a)m ‘, and similarly for the vacuum operators in 
the above equation. As explained in Sec. [Ill the orthogonality 
is only met in a region of width T /N, where all of the shifted 
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copies of the OFDM signal overlap. The signal corresponding 
to this overlapping time slot will eventually be detected by the 
photodetectors in the receiver module. 

With the phase encoding QKD protocol, the two successive 
pulses r and s for channel m, represented by a„ and ajjf, 
respectively, will be recombined at the receiver’s MZI in 
Fig. [3] The output operator corresponding to the recombined 
pulse d in Fig. [3] for the m' h output is then given by 

dJt) = ke»?%\f) + 3 «( 0 ) + (° + 

1=0 k =0 

N-2 N-l 

T-T c <t<T. (18) 

i =0 k—0 

B. Scheme II 

To start our analysis in this scheme, we denote the annihila¬ 
tion operator corresponding to the spatial mode at the output 
of the k ,h QKD encoder by a*. We assume that an OIDFT 
circuit similar to the one depicted in Fig. [3a) for N - 4, yet 
in the reverse direction, is used at the transmitter. Then, we 
can obtain the output operator of the Alice box by applying 
the transformation matrix of each MZI. It can be concluded 
that the output operator of the Alice box is given by 

j N-l 

x(t] — — Cipit - IT C ), (19) 

^ 1=0 

where c\ = Y!k=o d.ke ,lnk d N is the I th temporal mode at the 
output of the OIDFT circuit. Note that the coefficient 1 /N in 
( [T~9l > is not necessarily a source of loss, so long as the average 
number of photons per pulse at the output of the transmitter 
meets the requirements of the decoy-state protcol. That is, 
we can compensate for the internal loss at the transmitter 
by tuning the intensity of the input light. In our following 
analysis, this factor 1/A has been neglected. With a passive 
OFDM decoder similar to that of Scheme I at the receiver, the 
analysis presented in the previous subsection can be useful 
here as well, except that here we deal with temporal modes. 
Substituting in (U3 and simplifying the equations at 
n + l — N - 1, we can express each output of the ODFT circuit 
as 

9m(t) = [d m e j2m ’ KN ~ l)/N + ^ Yj^ikbik] 
i =0 k =0 

xp(t - T + T c ), m = 0,... ,N — 1. (20) 

The coefficient e t 2 '™('V- | )/v is a constant phase term that can 
be absorbed in a m in the above equation. 

Finally, the output operator obtained by the recombination 
of the pulses r and s by means of the receiver’s MZI, d m (t), 
is given by 

d,n(t) = ikertPag + «L S) ) + + 

1=0 k=0 

ZZWixpCf-r + rc). (2D 

1=0 k=0 


Another option for the receiver in this scheme is the 
structure we proposed in Fig. [3a). For this active decoder, 
(ED is multipled by an additional factor V/V. Furthermore, no 
vacuum components would appear because the beam splitters 
in the FFT circuit do not have any unused ports j8]. 

IV. Key Rate Analysis 

This section presents an analysis of the secret key generation 
rate for the proposed OFDM-QKD schemes. We assume that 
the efficient decoy-state BB84 protocol is employed in the 
QKD setup |[39l . l40ll . The average number of photons per 
QKD channel is given by p, for the main signal state, and 
it is calculated at the output of the Alice box. The secret 
key generation rate per transmitted pulse, in the limit of an 
infinitely long key, is lower bounded by max[0, P(Yo)], where 

P( Yo) = Qi(l - h(e 0) - fQ M h(E M ), (22) 

and h(p) = -p\og 2 p - (1 - p)log 2 (l - p) is the binary entropy 
function with / being the error correction inefficiency. The 
overall gain, the QBER, the gain of a single photon state and 
the error rate of a single photon state are, respectively, given 
by 0 

fi„ = 1 - (1 - Y 0 ) e -'"\ E t , = (Y 0 /2 + e d {\ - e^O/Q,,, 

Qi = y,pe^, ei = (Y 0 /2 + e d rj)/Y\. (23) 

Equations (l22l )-(l23l) provide an estimate to the generated 
key rate when infinitely many decoy states are in use and 
no eavesdropper is present. In the above equations, Yj = 
(1 - rj )Yo + 77 is the yield of a single photon state and Yo 
is the probability of any detector clicks without having any 
transmitted photons from the corresponding QKD encoder. 
Furthermore, e d represents the probability of phase stability 
errors, between r and s pulses, and the total transmissivity of 
the link is given by 

d = t7g 7 7d 7 7inslO _ “ L/1 °, (24) 

where r/ d is the quantum efficiency of the photodetectors, a 
is the channel loss factor in dB per unit of length and r/ lns 
represents any additional insertion loss in the link. Here, rj K 
represents the additional loss due to the OFDM decoding 
scheme. For instance, in Scheme I, with gate interval of T c , 
the parameter rj g equals 1 /N in the ideal case. For Scheme II, 
and the active decoder of Fig. [7J a), rj g is ideally one. 

We calculate the parameters in (l23l > by finding the prob¬ 
abilities of interest once the QKD measurements are done. 
For instance, the measurement operator for the representative 
photodetector in Fig. [3] is given by 

M = I d} n (t)d m (t)dt, (25) 

J gate inteval 

from which one can obtain key rate parameters. In the analysis 
of the key generation rate, the terms containing vacuum 
states will not contribute to the key rate parameters, and that 
simplifies the calculations. 

In order to analyze the secret key generation rate of the 
proposed schemes in more detail, one should consider the 
influence of imperfections in the system, which may degrade 
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TABLE I: Nominal values for system parameters 


Parameter 

Value 

Average number of photons per signal pulse 
Quantum Efficiency 

Total insertion and path loss, ^inslO -0 ^ 10 
Receiver dark count rate, ydc 

Error correction inefficiency, / 

Phase stability error, ej 

Laser pulse repetition interval, T s 

OFDM symbol duration, T 

Number of subcarriers, N 

0.48 

0.3 

10 dB 
IE-7 ns-' 
1.22 
0.005 

210 ps 

100 ps 

4, 8, 16 


system performance. As explained before, we specifically 
consider time misalignment issues, which are known to be 
critical in all-optical OFDM systems. In OFDM, the time 
alignment of the optical subchannels is critical, due to its 
effect on their orthogonality. Furthermore, the time gating 
at the receiver should be synchronized with the transmitted 
pulses to extract the correct time slot. In our OFDM-QKD 
setups, nonidentical QKD encoders or some errors in time¬ 
gating synchronization may introduce time misalignment. 

In our work, we have found the key generation rate of 
our proposed OFDM-QKD schemes in the presence of time 
misalignment issues. It turns out that they cause two problems. 
First, they generate some inter-channel crosstalk, denoted by 
p x t a ik, which adds to the background noise, and, second, they 
slightly reduce the transmissivity factor r) g . One can reduce 
the crosstalk noise by reducing the width of the gate interval, 
but, by doing so, ?/,, would further be reduced, as we have to 
leave out some of the desired signal components as well. That 
would imply the existence of an optimal gate width at which 
the total secret key rate Rofdm is maximized, where 

^ofdm = max[AP(YoFDM)/Tj, 0], (26) 

and 

YoFDM = 1 - (1 ~ iPdc + Pxtalk)) 2 - (27) 

Here, T s represents the repetition period of the QKD protocol 
and pdc = JdcTg, where y<j c and T g are the photodetectors’ dark 
count rate and the gate interval, respectively. In Appendix A, 
we have derived all the required terms for calculating the 
above key rate as a function of the average time misalignment 
E{|r*[), where 77. ’s are i.i.d random variables representing the 
time misalignment of the Hh channel with respect to the gate 
interval, and 5 = (T, - T p )/2, where T p is the pulse width in 
Scheme II. In the following, we present some of our numerical 
findings for a selected set of parameter values. 

V. Numerical Results 

In this section, we investigate the performance of the 
proposed OFDM-QKD schemes by considering the following 
cases: Scheme I and Scheme II with passive OFDM decoders, 
and Scheme II with the active OFDM decoder of Fig. Ufa). 
In order to evaluate the effect of time misalignment on the 
performance of each case, each subcarrier is assumed to have 
a time misalignment with uniform distribution, ~ U(-a, a), 
where a < T c is an arbitrary constant. We then find the 
optimal gate width that maximizes the key rate. The nominal 
values used for the system parameters are listed in Table 



Fig. 8: Background photon count probability components p^ c and p xta ik versus 
E{h>|}/r for Scheme II with active OFDM decoder, for different values of 
N. 


I. These parameters are chosen in accordance to practical 
considerations. With the chosen OFDM symbol duration, the 
subchannel frequency separation, A/, has to be 10 GHz, which 
has been used in several all-optical OFDM experiments ifTOft . 
ED. The pulse width, T p , in Scheme II should be less than 
T c - T/N. Here, we assume that the ratio 5/T p in this scheme 
is equal to 0.04. 

In order to see the importance of the time misalignment 
issue, we first look at its induced cross talk contribution as 
compared to the dark count component. Figure [8] compares 
the two elements of the background noise, i.e., /? ( | c and /? xta ik, 
versus a normalized measure of misalignment, E{ | [}/7\ in 

the special case of Scheme II with active decoders. A similar 
overall behavior is observed for other schemes as well. It is 
clear that while the cross talk is negligible for low values of 
time misalignment, it becomes the major source of noise in 
our OFDM-QKD setups. We next consider the effect of time 
misalignment on each of the proposed setups. 

Figure [9] shows the effect of time misalignment on the 
total secret key generation rate, Rofdm, of Scheme I with 
and without optimal time gating. In the latter case, the gate 
width is a constant T c . It can be seen that by optimizing the 
gate interval the secret key rate significantly improves. It will 
not, however, surpass the performance of a single-carrier link, 
shown on top of Fig. [9] run at the same clock rate as the OFDM 
system. The main reason for this is the loss factor N due to 
the time gating, which results in a reduced key rate per carrier. 
Moreover, Fig. [9] shows that a system with a larger number 
of subcarriers, N, is more susceptible to time misalignment 
errors. This has to do with the interplay between p xta ik and rj g , 
where the latter turns out to be the dominant factor. In short, 
no rate advantage is obtained by Scheme I. It, nevertheless, can 
be used as a multiplexing tool for sharing the infrastructure 
between multiple service providers. 

Next, Fig. [TO] shows the total secret key rate of Scheme 
II with passive OFDM decoder versus E{|r J t|}/7’. Here again. 
















Fig. 9: Secret key generation rate versus E{\ric\}/T for Scheme I and its 
optimal gate version, for different values of N. 



Fig. 10: Secret key generation rate versus E{|r*|}/7’ for Scheme II with passive 
OFDM decoder and its optimal gate version, for different values of N. The 
parameter 6/T p is chosen to be 0.04. 

applying the optimal gate interval results in an enhancement 
in the secret key rate. Yet, no improvement, as compared to 
the DWDM-QKD system, is observed in the overall key rate 
by increasing N, which is mainly due to the inherent loss in 
the passive structure of the OFDM decoder. 

The secret key generation rate of Scheme II with the pro¬ 
posed active OFDM decoder is depicted in Fig. HU It can be 
seen that by multiplexing more subchannels in the system the 
secret key rate increases. This increase is initially linear with 
the number of subchannels, but once the time misalignment 
kicks in the key rate also correspondingly drops. Nevertheless, 
it always stays above that of the single DWDM-QKD channel 
depicted in the bottom of the figure. In fairness to the DWDM 
system, we have accounted for 2 dB of additional insertion loss 
for the optical switch in the OFDM-QKD system. The DWDM 
curve uses 100-ps-long pulses. Under these conditions, for 
N = 16, and at a normalized average time misalignment of 
0.02, we are doing more than four times better than the single 


carrier link. That would demonstrate the prospect of using 
OFDM techniques at the core of QKD networks. 


x 10 8 



Fig. 11: Secret key generation rate versus E||T>|l/r for Scheme II with active 
OFDM decoder and its optimal gate version, for different values of N. The 
parameter S/T p is chosen to be 0.04. 

In addition to the total key rate, we also look at the spectral 
efficiency of each scheme, S, defined by the ratio of the 
secret key generation rate and the allocated bandwidth. In the 
case of a DWDM link with channel spacing of 50 GHz, in 
Fig. HU S = 0.11%. For the OFDM-QKD systems, assuming 
that the allocated bandwidth is given by N/T, S has a peak 
value of 0.36%, which is three times higher than that of the 
DWDM system. Once time misalignment kicks in, the OFDM- 
QKD systems with lower values of N are favored as they are 
less susceptible to such errors. Overall, it can be seen that 
by multiplexing 4-8 OFDM subcarriers, one can outperform 
DWDM-QKD systems both in terms of the total key rate and 
the spectral efficiency in practical regimes of operation. 

VI. Conclusions 

We proposed a spectrally efficient approach to multiplexing 
QKD channels, namely, OFDM-QKD. Based on the principles 
of all-optical OFDM in classical communications, several 
OFDM-QKD schemes were considered. These schemes were 
analyzed in detail, in terms of their secret key generation rate, 
considering time-alignment imperfections, which are critical 
in all-optical OFDM systems. It was shown that such time 
misalignment issues would introduce a crosstalk noise with a 
degrading effect on the key rate, similar to that of background 
noise. We showed that by reducing the gate interval to an 
optimal value this problem could be alleviated to a large 
extent. Most importantly, we showed that the existing passive 
structures for the OFDM decoder would provide no gain in 
their multiplexing, in terms of the total achievable key rate. We 
proposed an active OFDM decoder, which, by using an optical 
switch, followed by proper delays and a passive FFT circuit, 
could eliminate the inherent loss in passive decoders. We 
remark that, in the case of active decoders, ultrafast switches 
with a transition time on the order of picoseconds may be 
required. This is due to the short time separation of pulses 
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within an OFDM symbol ||38l , |j42) . This may add to the 
cost and complexity of the system. Nevertheless, we showed 
that, using our proposed active decoders, we could outperform 
the alternative DWDM-QKD systems in terms of the total key 
rate and spectral efficiency. This implies that OFDM-QKD can 
provide a high-rate spectrally efficient method of key exchange 
at the core of trusted-node QKD networks. 

Appendix A 

OFDM-QKD with misalignment errors 
In this appendix, we analyze the operation of our proposed 
OFDM-QKD setups in the presence of time misalignment. 

A. Scheme I 


sources have independent phases. In this case, the phase differ¬ 
ence corresponding to any cross term has uniform distribution 
on the interval [—n, 7t]. These terms are then eliminated due 
to their zero expected values. At this point, we generalize our 
result to include the case —T c <T k < 0. Hence, equation ( 1321 
can be rewritten as 

= 2 - 0 ^. ( 33 > 

In the last step, the partial crosstalks due to each subcarrier 
are added to obtain the total crosstalk background count on 
the m th subcarrier, denoted by p as follows: 

p { 2\ Z E{|Ttl1 ’ (34) 

k±m 


We start our analysis by assuming that each subcarrier has 
a time misalignment r>, 0 < |t*| < T c , with respect to the 
time gating interval. Without loss of generality, we assume 
that 0 < Tk < T c (both cases of r k > 0 and T k < 0 have the 
same effect). Figure [T2f a) shows the shifted copies of the k ,h 
subcarrier pulse in the presence of time misalignment j k . As 
can be seen in the figure, the shifted copies does not overlap 
completely in the gate interval, which leads to different 
summation results in two distinct time intervals, as follows: 

te(T-T c ,T-T c + T k )^X m (t) = { W" (28) 

A f 0 It ^ 171 

t,(T-T c + r k ,T)^X m (t) = [. m(t) ft = JB -(29) 
As a consequence, equation (fl8l> is modified to 

d m (t) = ij{ ^ {e^K a\\\t) + a^(f))li6(7’-r c ,7'-r c +T m ) + 
(e^affif) + a^\t))\, e(J -. Tc+TmJ) + 

— ^ (e^ B a k \t) + a k \t))\ te (T-T c ,T-T c + Tk )}, (30) 

k£m 

with the third term representing the inter-subcarrier crosstalk 
on the m th subcarrier. Here, we neglected the vacuum operators 
due to their elimination once we apply the measurement 
operator. The background count due to this crosstalk may 
influence the performance of the system, as we will show in 
the following. 

Defining g k (t) = + a[ s \t )) with initial state 

■ ,(k) 

\a) r \ae J<PA ) s , we can write 

(glgk) = ^(1 + cos((pf - <p k B ))jr- (31) 

Here, p - \a\ 2 and cp (k) is the relative phase produced by 
the QKD encoder of the k ,h subcarrier. We then calculate the 
expected value of (OH as a function of (<p ik) - which 
results in 

E = \%f-^){{s\gk)\basis = {0,7r}} + 

^ E (<pf-<l,f){(8l8k)\basis = {n/2,3n/2}} = . (32) 

Note that cross terms between any two different subcarriers 
also appear in the (dj„d m ). Here, we assume that the laser 


where //' is the transmissivity of the link, excluding the loss of 
time gating. Under the assumption that |t*|’s are i.i.d random 
variables, p'"’^ k is independent of the subcarrier index. So, we 
can express the crosstalk background count per subcarrier as 


Px talk — P 


2 A i(N-1)E{|t,|} 

N 2 T 


(35) 


Such time misalignments change the loss factor in the time 
gating operation, p g , due to the additional loss occurring in 
the interval (T - T C ,T - T c + r m ) in ( l30l ). rj g is then given by 


, = i- ( « )( l-(^). 

ig N T N 


(36) 


Now, let us reduce the gate interval by b from each side to 
reduce the crosstalk effect. It can be concluded from Fig. lTH a) 
that p x taik = E{A), where A is obtained by 


A - f \n\-b) 


Ini > b 
Ini < b 


(37) 


and p x taik can be expressed as 

Pxtaik = l \ (\T k \ > £>)(E{|t*|||t a -| > b) - b). (38) 

Furtheremore, r] g = E(/i}, where 


R= i W ~ f ~ K 1 - (WXd^l - *) \ T k\^ b 

S 0 0 < Irjfcl < b 

(39) 

and 

Vg = ^ - jr - ^r(i — () 2 )/ ? (lnl > £)(E{|nlllnl > b}-b). 

(40) 


B. Scheme II 

As explained in Sec. 11 two receiver structures can be 
applied for this scheme: the passive OFDM decoder used 
in Scheme I, and the active OFDM decoder, which exploits 
an optical switch. In this subsection, we derive the crosstalk 
background count for both receiver structures. 

First, we consider Scheme II with a passive OFDM decoder. 
We assume a time misalignment t>, 0 < |nl < 7, , with respect 
to the time gating interval for each tributary. Figure 1 1 21 b ) 
depicts the replicas of the pulse series corresponding to the k ,h 
tributary. We denote the width of each pulse by T p . Following 
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Fig. 12: Shifted copies of the signal corresponding to k th tributary in the 
presence of the time misalignment r*, for (a) Scheme I, (b) Scheme II with 
passive OFDM decoder, (c) Scheme II with active OFDM decoder. 


the same steps as in the previous subsection, we conclude that 
the output operator, d m (t), for 0 < r* < 6 is given by 

d„M =±(e J *' ) a%(t) + a%(t)), (41) 

and for 5 < Tk < T c we have 

d,n(t) = + a\n(.t))\te(T-T c ,T-T c +T m - 8 ) 

+ d\^(t) + a < ;^(t))\ t€ (T-T c +T m +s,T) 

+ jj f, (e^B af (f) + d^\t))\ te(T -T c ,T-T c+ T t -S)}i^) 
k±m 


where b - (T c - T p )/2. From this equation we can conclude 
that in the case of 6 < |r*| < T c , an inter-subcarrier crosstalk is 
introduced. We can then derive the background count of such 
crosstalk by applying the same strategy as in the previous 
subsection. The final result can be expressed as 

Pxtaik = n' 2lj( ^~ l) p{\Tk\ > <S)(E{|T*|||T*| > 5) - b). (43) 

Furthermore, the degrading effect of time misalignment on q g 
modifies this parameter to 


7 h = 77 - ( 


1 )(1 - (— 77 —) 2 )/?(|Trl > <5)(E{|rt|||r t | > 5) - 5). 


N NT, 


p 


N 


(44) 

Now, we consider the narrowed gate case. If the gate interval 
is decreased by b from each side, we can conclude from 
Fig. [TZlb ) that p xta ik = E{A}, where 


A = 


_/ >/^^( \n\-b-S) |t>| > b + 6 


0 


|t*| < b + 6 


(45) 


Hence, p xta ik can be written as 

,2MV-1) 


Pxtalk — H 


N 3 T„ 


p(\T k \ > * + d)(E{|Tt[||T t | > b + S]-(b + S)). 

(46) 

The loss factor q g is also obtained by Ej/i), where B is given 
by 

k-m-- M 7 C 1 - (^) 2 )((l^l - (b + 6)) \r k \ >b + 5 
B - l ’ \b-5\<\r k \<b + 6 

L-^I u (b-6) 0<\T k \<\b-6\ 

(47) 


where u{.) is the step function. Hence, //„ can be expressed 


n„ — -{( 

18 N NT, 


2b (b + 6) 


NT,, 


(l-(- 


N- 1 


N 


-f))p(\T k \>b + 6)- 


1 -d - (^ 77 ~) 2 )p(\r k \ >b + d)(E{|Tt|||r t | > b + 5}) ■ 


NT p N 

^Njf^ P(\b - b| < |r*| <b + 5)) + j^jr(p(\T k \ >\b- d|) 

(E{|r*|||r*| > I b- b|}) - p(\T k \ >b + <S)(E{|t*|||t*| >b + b})) 
2 (b - 6) 


NT,, 


-p(\T k \ < b-6)u(b-6)} 


(48) 


Next, we discuss the time misalignment issue in Scheme II 
with an active OFDM decoder. Figure IT 2 l c ) shows the pulse 
series of the k' h tributary in the presence of time misalignment 
Tk, 0 < |t*| < T c , with respect to the switching time. Due 
to the elimination of the loss incurred by passive serial to 
parallel conversion, equations (| 4 TT > and (l 42 l > are modified by a 
multiplicative factor W Hence, the parameters /? xta ik and q g 
are, respectively, given by (l 43 l ) and ( l 44 l >. multiplied by N. 
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